CVE-2025-48415 in cPH2 Charging Stationthông tin

Tóm tắt

Bởi MITRE • 21/05/2025

A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files. The .ini file can contain several "commands" that could be exploited by an attacker to export or modify the device configuration, enable an SSH backdoor  or perform other administrative actions. Ultimately, this backdoor also allows arbitrary execution of OS commands.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

chịu trách nhiệm

SEC-VLab

Đặt trước

20/05/2025

Tiết lộ

21/05/2025

Kiểm duyệt

được chấp nhận

EPSS

0.00201

KEV

không

Các hoạt động

rất thấp

Nguồn

Interested in the pricing of exploits?

See the underground prices here!